CVE-2025-43434

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
appleCNA
---
---
CISA-ADPADP
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
VendorProductVersion
applesafari
𝑥
< 26.1
appleipados
𝑥
< 26.1
appleiphone_os
𝑥
< 26.1
applevisionos
𝑥
< 26.1
applewatchos
𝑥
< 26.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
webkitgtk
questing
dne
plucky
dne
noble
dne
jammy
dne
bionic
ignored
xenial
ignored
webkit2gtk
questing
Fixed 2.50.2-0ubuntu0.25.10.2
released
plucky
Fixed 2.50.2-0ubuntu0.25.04.2
released
noble
Fixed 2.50.2-0ubuntu0.24.04.2
released
jammy
Fixed 2.50.2-0ubuntu0.22.04.2
released
focal
ignored
bionic
ignored
xenial
ignored
qtwebkit-source
questing
dne
plucky
dne
noble
dne
jammy
dne
bionic
ignored
xenial
ignored
qtwebkit-opensource-src
questing
dne
plucky
dne
noble
ignored
jammy
ignored
focal
ignored
bionic
ignored
xenial
ignored
wpewebkit
questing
dne
plucky
dne
noble
dne
jammy
ignored
focal
ignored
Common Weakness Enumeration
References
https://support.apple.com/en-us/125633